Spec deltas

The MCP adapter SHALL expose model-controlled read tools over grant-scoped PDPP client tokens. The adapter SHALL NOT issue grants, request new authorization, run connectors, access reference owner-control endpoints, or broaden the grant scope.

The reference implementation SHALL provide shared read/evidence semantics for evidence cards, continuation descriptors, truncation descriptors, binary metadata, manifest-declared presentation, and stable record identity. MCP, CLI, REST evidence projections, and console surfaces SHALL use those shared semantics when rendering the same read evidence concept.